$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa File: 1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa (raw, json) Hash identifier: /GfLfELBHUh2AmNqD2BVvy2EDmbpm2xRhSAAox2eoOY= Subject key identifier: BE:BB:F6:4A:D0:B2:1E:B4:FD:AD:79:2C:4C:B3:79:D1:71:B6:C8:E7 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584DE41B1BFCF9CF456A2842F500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16591 IP address blocks: 136.38.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:1b:fc:f9:cf:45:6a:28:42:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=5ac200cf-a320-4102-9876-f845d6944dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:1a:58:c2:28:c1:a6:b4:ac:25:64:d6:26: 1a:40:81:95:31:c2:1c:c2:fd:35:f7:68:7d:5d:90: 2d:0f:b7:3e:07:bd:39:ab:2f:72:de:a0:4d:f7:06: 14:0a:f5:d6:8d:d0:40:60:b3:1a:83:ae:b2:5e:a4: 4a:63:bc:67:54:aa:56:00:c6:86:45:99:8e:4d:9e: d5:ca:c1:2a:70:3e:a8:9d:8b:3b:4a:5b:84:5d:ec: e2:26:8b:9f:2d:08:4e:bb:25:b7:88:3a:02:1b:1c: e8:f0:6b:b7:09:ef:58:33:5f:e4:5f:1e:e3:15:ae: c5:4a:38:92:81:0b:69:44:e3:8d:7f:08:80:6d:dd: 46:c2:1f:be:3f:42:a6:fa:85:27:82:f4:cc:35:f4: fc:0d:92:8e:cd:d9:ec:66:59:51:47:0f:04:99:f4: 4d:49:14:43:dd:9e:d1:b2:a9:64:80:b8:0d:dc:30: 94:88:fd:c9:57:9a:16:7e:42:5f:62:8b:f6:08:cb: 4e:02:a6:15:5d:ce:47:86:91:ff:29:c9:69:da:be: 63:ac:c4:94:a7:14:dc:d1:ca:4d:56:2e:c2:a2:8f: 83:40:e0:d2:02:03:2e:51:35:2f:2b:02:da:10:8a: 3e:13:0e:3b:e2:dc:b3:5e:b4:c5:cf:5a:e4:d8:1e: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BB:F6:4A:D0:B2:1E:B4:FD:AD:79:2C:4C:B3:79:D1:71:B6:C8:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:72:eb:1d:60:67:e5:f8:b9:a4:b5:c4:95:2a:0b:b8:dd:fd: d4:94:05:bc:1a:74:20:98:79:f0:4a:8e:9f:4e:19:47:e7:cb: 3d:b5:88:44:3f:ea:02:ab:fe:d7:69:a3:75:52:f0:95:b4:cf: 94:97:78:d1:51:1f:ab:9a:3a:5e:ea:2f:26:c3:8d:c9:a9:7b: 18:12:13:60:f8:1a:49:ab:e7:b5:bb:a1:e6:e0:bc:d6:e3:f6: 44:fb:3f:21:e3:bc:b0:14:78:6e:41:b4:4e:b6:d9:0e:30:85: 16:3c:0f:0c:00:29:80:26:20:af:7d:67:09:20:38:38:80:59: 5a:ad:0c:e0:5e:08:06:fe:12:01:8b:d8:c7:5b:5e:38:5b:c1: a9:ab:cc:98:e0:f5:84:fa:67:4c:df:31:7b:8c:3c:71:a6:f5: a7:74:0b:2b:c9:f9:51:54:9d:3e:11:1e:39:34:32:be:c7:3a: 98:57:6c:83:2d:e7:5e:5c:ba:eb:4c:bb:0a:76:b1:c2:06:82: eb:78:0e:f2:a3:a8:37:f0:b6:7d:e2:98:b0:1c:83:13:34:50: 46:09:08:f6:88:9e:ca:3e:c7:80:1d:c0:6f:3e:fb:3d:20:b9: 55:0b:de:d5:01:1b:cf:6c:bc:46:e3:89:92:55:79:07:30:56: a9:18:0f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGxv8+c9FaihC9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk NWFjMjAwY2YtYTMyMC00MTAyLTk4NzYtZjg0NWQ2OTQ0ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkugaWMIowaa0rCVk1iYaQIGVMcIcwv0192h9 XZAtD7c+B705qy9y3qBN9wYUCvXWjdBAYLMag66yXqRKY7xnVKpWAMaGRZmOTZ7V ysEqcD6onYs7SluEXeziJoufLQhOuyW3iDoCGxzo8Gu3Ce9YM1/kXx7jFa7FSjiS gQtpROONfwiAbd1Gwh++P0Km+oUngvTMNfT8DZKOzdnsZllRRw8EmfRNSRRD3Z7R sqlkgLgN3DCUiP3JV5oWfkJfYov2CMtOAqYVXc5HhpH/Kclp2r5jrMSUpxTc0cpN Vi7Coo+DQODSAgMuUTUvKwLaEIo+Ew474tyzXrTFz1rk2B7HWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL679krQsh60/a15LEyzedFxtsjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWVjZjZhMGEtOGM0NS0z ZDU3LTgyMGEtOTRjNDcwZjY1NmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABty6x1gZ+X4uaS1xJUqC7jd/dSUBbwadCCYefBKjp9OGUfnyz21iEQ/ 6gKr/tdpo3VS8JW0z5SXeNFRH6uaOl7qLybDjcmpexgSE2D4Gkmr57W7oebgvNbj 9kT7PyHjvLAUeG5BtE622Q4whRY8DwwAKYAmIK99ZwkgODiAWVqtDOBeCAb+EgGL 2MdbXjhbwamrzJjg9YT6Z0zfMXuMPHGm9ad0CyvJ+VFUnT4RHjk0Mr7HOphXbIMt 515cuutMuwp2scIGgut4DvKjqDfwtn3imLAcgxM0UEYJCPaInso+x4AdwG8++z0g uVUL3tUBG89svEbjiZJVeQcwVqkYD2Y= -----END CERTIFICATE-----Generated at Fri May 22 17:39:38 2026 by rpki-client